Acunetix Vulnerability Scanner 9.5 Released

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from Chromium-based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox on Windows. It implements an App-Bound Encryption bypass for Chrome 127+ by injecting a DLL into a headless Chromium process to use the IElevator COM interface to decrypt encryption keys, includes DPAPI and NSS handling for other browsers, and contains operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), making it effective for red-team testing and a high-impact tool if misused by adversaries.